
$ rpki-client -vvf rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
File: PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft (raw, json)
Hash identifier: 5eWtvK8jv9cqEacpIxiCCVeTP3Se97TLrP4nLstAFzc=
Subject key identifier: DD:8D:BC:E9:D1:33:32:61:32:C0:B8:49:A0:8A:52:77:41:44:B0:F7
Authority key identifier: 3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
Certificate issuer: /CN=A91538E7/serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
Manifest number: 8E
Signing time: Thu 16 Apr 2026 20:42:43 +0000
Manifest this update: Thu 16 Apr 2026 20:42:42 +0000
Manifest next update: Thu 23 Apr 2026 20:42:42 +0000
Files and hashes: 1: PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl (hash: TtWLeuFJIu5uU6T6g1eIGbc7TttRJxZCtGrBZpeDUXo=)
2: 844A140AC5F111F08382761DC4F9AE02.roa (hash: i9mhRJ5avRniNa/Or9GSMjn28Yf76/Ztdl3z8dFyYH0=)
3: 025F9668C60A11F0AB4AE483C4F9AE02.roa (hash: ck7EdxjimXDwSiGbbik85D8DmhKPqzjo4eBl7XbzG4k=)
4: 901A806E936311F0AFC2992BC4F9AE02.roa (hash: 4jEVz1hG1/Z1VyTQpmLsIhOnSHh6bzFw7W7dBzuJBMc=)
5: 0228453AC5F811F08FFA5F38C4F9AE02.roa (hash: wxhbuzbWu3rbI56tYOuHWo55ZaPV1JMd62naT16Ecvo=)
6: 12A52794DD1211F0B41550BC5F6F56BC.roa (hash: poFkQcNLaPe2AFd5eZOfOml2iDaf3YW9G1N1COGbd/Q=)
7: A1FA022EC60C11F08F496250C4F9AE02.roa (hash: MDzGdNCdYO5kEPXtS7TyIQqy0+x2zenoCh7GnwVkOyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91538E7, serialNumber=3D6216D55CB54FC9B570F9F25F9ADD0F3769B4DE
Validity
Not Before: Apr 16 20:42:42 2026 GMT
Not After : Apr 23 20:42:42 2026 GMT
Subject: CN=69e149c3-185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:b6:22:bf:3d:91:fa:d1:62:ca:0e:fe:e3:
e1:9c:6f:e2:5b:8f:00:bc:eb:a0:1b:24:df:0a:27:
0e:58:e9:1d:65:f4:de:1c:05:fb:25:7e:65:d5:97:
83:5c:c2:3b:99:6e:77:51:86:1c:18:5f:76:37:f5:
97:88:ca:12:8f:41:a1:a0:97:af:4d:a4:80:76:d1:
84:92:0f:0a:1c:62:69:1a:20:75:d1:7d:56:14:21:
e7:f1:e0:64:9e:24:47:a9:a3:3a:4b:8e:1d:24:05:
81:38:30:61:e2:65:84:17:e0:6e:16:68:d0:7e:96:
5f:02:69:45:3b:79:8c:ad:e0:fd:7d:cf:74:aa:2e:
75:f1:35:08:97:2c:f6:5b:50:a4:bb:b1:50:20:b9:
d2:99:44:37:f2:b0:03:29:6a:2e:ac:1d:b6:07:29:
2e:19:96:6b:53:67:6d:4d:dc:10:26:45:9d:66:ea:
90:c3:a2:d9:e8:44:9f:68:a2:01:2f:2f:51:91:6b:
c2:b8:00:ba:98:ad:96:55:62:c5:7e:90:8d:fb:b1:
f7:df:27:4e:07:1e:9d:43:3f:6b:f9:0e:27:64:f3:
8e:80:31:86:08:96:d6:e4:8e:83:60:7d:20:26:04:
6a:bd:fd:80:fb:2c:fd:1b:fb:73:97:6b:fb:60:8a:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:BC:E9:D1:33:32:61:32:C0:B8:49:A0:8A:52:77:41:44:B0:F7
X509v3 Authority Key Identifier:
keyid:3D:62:16:D5:5C:B5:4F:C9:B5:70:F9:F2:5F:9A:DD:0F:37:69:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PWIW1Vy1T8m1cPnyX5rdDzdptN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91538E7/C62B2986934211F0A987783BC4F9AE02/PWIW1Vy1T8m1cPnyX5rdDzdptN4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:0e:34:70:f7:0a:58:55:d1:4c:33:e1:a1:e7:7b:11:bd:c4:
c6:1e:1d:17:b8:29:06:4b:14:54:2d:7a:4d:d1:a0:dd:3c:d9:
7c:c1:56:ff:5c:6e:e4:71:82:37:65:00:c0:42:56:42:54:cc:
73:88:55:fd:ca:c4:4d:d6:fd:05:22:c4:27:a5:86:96:a1:f7:
5e:12:9d:66:0f:23:9b:08:e7:e6:22:eb:7f:c3:60:0a:3f:cf:
00:d9:7b:90:7d:ff:e8:74:93:48:27:46:e1:7a:14:50:de:11:
2b:30:54:22:ba:be:f6:d5:31:da:95:69:7e:41:a0:09:b0:cc:
12:af:98:3c:11:27:f7:49:e9:e6:c0:22:0f:40:24:36:b1:3e:
6b:5b:2f:e0:ed:5e:8d:2b:92:ad:08:0c:64:5a:dd:59:e1:88:
21:61:33:01:b9:81:74:f8:9f:97:82:56:46:64:23:df:e6:0a:
4f:d9:8b:1c:5f:cb:7f:91:ed:bc:ac:04:40:76:fb:91:32:27:
c5:c4:08:6d:0b:33:24:e6:ad:70:76:2f:0e:d5:59:ca:bf:9f:
17:ae:2e:4f:6b:c4:0b:e1:ab:ba:42:fb:e3:68:58:b0:9f:f6:
6d:cf:56:4d:56:f9:d5:e2:4a:be:cd:6a:51:bb:12:62:1e:46:
b8:a5:8a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:24 2026 by rpki-client